~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.0 (12.05.2016) Operating System: Windows 7 Ultimate x86 Ran by stone (Administrator) on Fri 12/23/2016 at 15:41:34.53 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 26 Failed to delete: C:\Program Files\contentpush (Folder) Failed to delete: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D6ECEHSM (Temporary Internet Files Folder) Successfully deleted: C:\ProgramData\chelfnotify (Folder) Successfully deleted: C:\ProgramData\productdata (Folder) Successfully deleted: C:\ProgramData\windowsmsg (Folder) Successfully deleted: C:\Users\stone\AppData\Local\{0F376500-DFBE-47DE-A1F0-B86761A82BF2} (Empty Folder) Successfully deleted: C:\Users\stone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\monhost.lnk (Shortcut) Successfully deleted: C:\Users\stone\AppData\Roaming\vdi\shared\product updater (Folder) Successfully deleted: C:\Windows\System32\Tasks\osTip (Task) Successfully deleted: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2S96FJDY (Temporary Internet Files Folder) Successfully deleted: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5D0ZT379 (Temporary Internet Files Folder) Successfully deleted: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6BYOQNVJ (Temporary Internet Files Folder) Successfully deleted: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9XBBR60J (Temporary Internet Files Folder) Successfully deleted: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ED0Z438A (Temporary Internet Files Folder) Successfully deleted: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QAPNPL (Temporary Internet Files Folder) Successfully deleted: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLXMXDDJ (Temporary Internet Files Folder) Successfully deleted: C:\Users\stone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RI425DX5 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2S96FJDY (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5D0ZT379 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6BYOQNVJ (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9XBBR60J (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D6ECEHSM (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ED0Z438A (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QAPNPL (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLXMXDDJ (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RI425DX5 (Temporary Internet Files Folder) Registry: 11 Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_206DCFE4265157F6A4EE613BC92AB165 (Registry Value) Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\osmsg (Registry Value) Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\BsrSvc (Registry Key) Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Main\\Search Bar (Registry Value) Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page (Registry Value) Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Main\\SearchAssistant (Registry Value) Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL (Registry Value) Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchUrl\\Default (Registry Value) Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Main\\Search Page (Registry Value) Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchUrl\\Default (Registry Value) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Fri 12/23/2016 at 15:44:48.64 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~